11862 matches found
Sql injection
Multiple SQL injection vulnerabilities in Phpclanwebsite aka PCW 1.23.3 Fix Pack 5 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 page parameter to index.php, 2 formid parameter to pcw/processforms.php, 3 pcwlogin and 4 pcwpass...
CVE-2008-5874
CVE-2008-5874 relates to multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (Joomla! HBS) via the id parameter in showhoteldetails for modules (1) com_allhotels and (2) com_5starhotels. The underlying issue is unsafely constructed SQL in these components, enabling remo...
Sql injection
SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...
Sql injection
SQL injection vulnerability in the Top Hotel comtophotelmodule component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...
Sql injection
SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the y parameter in a getuser action...
CVE-2008-5859
SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showpage parameter...
CVE-2008-5838
SQL injection vulnerability in searchresults.php in E-Php Scripts E-Shop aka E-Php Shopping Cart Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2008-5838
SQL injection vulnerability in searchresults.php in E-Php Scripts E-Shop aka E-Php Shopping Cart Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2008-5841
Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to 1 previews.php and 2 reviews.php, and the 3 id parameter to index.php in a viewarticle action...
CVE-2008-2381
SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the comments variable...
CVE-2008-2381
SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the comments variable...
CVE-2008-5815
SQL injection vulnerability in Acomment.php in phpAlumni allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
Multiple SQL injection vulnerabilities in index.php in Web Scribble Solutions webClassifieds 2005 allow remote attackers to execute arbitrary SQL commands via the 1 user and 2 password fields in a signin action...
Sql injection
SQL injection vulnerability in Acomment.php in phpAlumni allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5813
SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the refid parameter...
Sql injection
SQL injection vulnerability in eDNewsview.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2008-5815
The CVE-2008-5815 entry describes a SQL injection in Acomment.php of phpAlumni, exploitable via the id parameter to allow remote execution of arbitrary SQL. The vulnerability affects phpAlumni’s Acomment.php component and is supported by NVD/other records (e.g., exploit references). The provided ...
Sql injection
SQL injection vulnerability in the Wir ber uns sic fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...